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Case Information: 
Acquired using: ADI3.1.1.8
Case Number: 0004
Evidence Number: 01
Unique description: Stealthy ADS Case
Examiner: Ali Hadi
Notes: Running Malicious Code from Stealthy ADS

--------------------------------------------------------------

Information for \\vmware-host\Shared Folders\Image\StealthyADS:

Physical Evidentiary Item (Source) Information:
[Device Info]
 Source Type: Logical
[Drive Geometry]
 Bytes per Sector: 512
 Sector Count: 83,881,984
[Physical Drive Information]
 Removable drive: False
 Source data size: 40958 MB
 Sector count:    83881984
[Computed Hashes]
 MD5 checksum:    b2eaae1f1ce8f94306e0aa7e4bd58ced
 SHA1 checksum:   54ab548ece5a92a3cde46f67fbe1c3e14f8f173d

Image Information:
 Acquisition started:   Sun May 26 01:53:18 2019
 Acquisition finished:  Sun May 26 02:13:20 2019
 Segment list:
  \\vmware-host\Shared Folders\Image\StealthyADS.E01

Image Verification Results:
 Verification started:  Sun May 26 02:13:21 2019
 Verification finished: Sun May 26 02:27:59 2019
 MD5 checksum:    b2eaae1f1ce8f94306e0aa7e4bd58ced : verified
 SHA1 checksum:   54ab548ece5a92a3cde46f67fbe1c3e14f8f173d : verified
